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_ | is on high power* high frequency 

radio,} High speed morse and radioprinter (both single channel 
and multiplex) are used cm the main links although there is still 
sooe manual morse, In general, good ] _ ( signals are available 
at present intercept sites. The pronLem is largely one of 
efficient operation and handling of the extremely large quantities 
of traffic vMsh must be screened for desired messages* 



National Commercial Radio is the name chosen, for the puiv 
pose of this paper, for internal networks, such as the Bracilim 
and Russian Givil, These nets carry internal commercial traffic, 
of the type generally carried in the P, S, by Western UnioRo 
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Military Tactical traffic (sometimes referred to as lot? level) 
is Usually intercepted and, to some extent, processed by Military 
fClose Support” CCtHHT organisations, tdiieh produce "tactical” 
totelligmce^prSaiarily "Order of Battle" * of direct value to the 
form of reports and, later, of the r aw intercept itself, are 
forwarded to HSA* However, the initial user Is in the field and 
control of "Close Support" activities and, to the maximum 
practicable extent, processing functions are delegated to the 
cognizant service organization* Military Tactical traffic, 
since it is generally being sent by or received by subordinate 
units, is usually lew powered and is transmitted by relatively 
simple ecoamjnie&tlosx systems* la the! 



[ Radiotelephone 
services* 



Lso is usee 



Military Strategic refers to high level military canaaunlcatiaaB, 
including those connecting Corps end Army Headquarters with War 
Ministry (and for corresponding and echelons of the parallel service 
branches) • Normally, high traffic densities end very secure 
cryptographic systems are used at this level* In the U 0 S» Armed 
Forces heavy use is made of radio nrlnter systems which include 
the radloprlater maltiplexea,, 3a, I 



Support Coraranications is the name chosen, for the purposes 
of this paper, for those communications required, dither on & 
broadcast or a point-to-point basis to support various types of 
operations* Weather nets and broadcasts, navigation al systems 
and services are examples of support e ocanunic ations » 1 
support communications (liter’s!) include hand speed Morse and 
single channel radioprlnter* 
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plex on throe or four* All three of these have posed serloue 
intercept problems which have required research and development* 
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Demands for improvement c£ intercept of this signal have 
led to considerable efforts on the part of PROD; the signal 
ie new magnet-1 aaliv rannydflij . end centrally processed similarly 
to the | described above 0 Circuit dis- 

gtnUne md operato r standards are excellent, and relatively 

are believed to be used. The signal is 
generally transmitted on one side of a Double Frequency Shift 
transmission 0 Keying rates and standardisation of shifts are 
such that intercaption and demodulation may efficiently be 
accomplished with standard equipment, including the AFSAV D35 
Double Frequency Shift Demodulator 0 







COOP' 

aequently, severe tuning and suability requirements axe placed 
on intercept equipment. To date, these special needs have 
been met by an interim high precision intercept system still 
undergoing development and improvement, incorporating highly 
stable receiving and recording equipments and a special 
tuning indicator. The Flexible Multiplex always appears in 
a circuit, i a e 9 , with two way transmission and reception 
between two points, and both links are simultaneously re- 
corded on the same magnetic tape. The recordings are then 
processed in N5A under conditions designed to give both the 
best possible transcription and an evaluation of the probable 
degree of garble. Research and Development on this problem, 
including the Central Processing Aspects, are continuing « 
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Noise Communications 

A ccHxmmiijatiori technique, attractive to communicators 
both because of certain concealment and anti- Jamming features, 
is hnotm as ^noise coaaaunications” and is currently undergoing 
extensive experimentation by U. S. groups. (Noise eonmuni- 
cations, generally using some form of white, or apparently 
white, noise as the carrier to be modulated by the intelligence) 
follow directly from modern information theory studies and 
the various correlation ti me domain filtering techniques which 
are now advancing rapidly. 1 



EO 3.3(h)(2) Various electrical and electromechanical devices, such as 

PL 86-36/50 USC 3605 teletype machines may radiate signals which can be read on 

power lines and through the air, as well as on the signal line 
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has bean developed in studies designed to main tain the 
security of our own cryptographic devices. These techniques 
are, however, available Tor offensive use. Although most 
operations of this typo would be covert, the possibility exists 



II TRAFFIC OPERATIONS HmEPLEflMJT (F S2STEM 
A 0 Preliminary Processing 
1 0 Logging and Editing 

After traffic has been microfilmed and time-stamped it is 
brought into the analytic sections where it is separated into 
identifiable systems. A record of all traffic for ■which a 
section in responsible is maintained in the form of a log. 
Messages are hand sorbed in an order determined by the format 
of the log and then recorded in the log by hand. Duplicate 
massages are noted at this point and massages are given 
worksheet numbers. Originals and duplicates are filed to- 
gether. If textual material is to be keypunched into cards or 
tape the traffic is edited by the logger. This editing in- 
cludes deletion of uninformative material, reordering of 
Information, discrimination between textual and non-textual 
groups, correction of group length and run-together groups, 
etc. often the same messages are logged in two or more 
different ways by the same or different sections. Properly 
speaking, legging and editing are not readily separable. 

One set at logging information could be enough for logs for 
all needs if a means for ready resorting were available. 
Currently experiments are being made to determine techniques 
needed for machine editing. Time in preparing logs must be 
kept at a minimum for the older the log is the less valuable 
it becomes. Two prototype editing machines are under con- 
struction. When editing in performed logging information can 
and should be extracted. Logging currently requires about 2% 
of PROD man hours. As this is often routine and duplicated 
hand work there is a need for mechanisation. 
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2* Data Convers ion 

mnm iia n aiiMwi iri i ^rw i ^wyiwim i r w 

Traffic arrives at HSA in as many as four different 
forms j hard copy, perforated paper tape, magnetic tape, and 
occasionally punched cards 6 In cases in which hard copy does 
not exist it is usually made* In addition edited versions 
of this data are required variously in punched cards, per® 
f orated paper tape, and magnetic tape as inputs to the various 
analytic machine s 0 The same data may be required in more than 
one of these forms* Currently there is considerable duplication 
of punching in slightly varying forma* 

3o Data Storage and Recovery 

Currently all hard copy traffic is aicrofiliaod and 
numbered in order of arrival* This number is needed to re® 
fer back to the microfilm* Ordinary photographic techniques 
must be used to obtain a print xdiich can be used by the 
analyst* A problem of vast magnitude exists in the storage 
of collateral information used by the intelligence analysts* 

These files are of such a nature as to require continual addition 
both of now subjects and new information under old. subjects* 

Much of the reproduction of this information is done by 
standard photographic techniques* The recording, reproduction, 
and cataloging of this material are all in need of mechanized 
aid* There is currently a study project on this topic* 

B* Hen-Textual Analysis 

Traffic analysis can be thought of as all CGtHOT obtained from 
sources other than textual* Of primary importance is the reconstruction of 
conmiunicatlon nets employed by the enemy* Nets are reconstructed by the 
analysis of Gall signs, frequencies, chatter, numbers, page and pad numbers, 
addresses, and collateral infomatich. Continuities in one or more of 
the above mentioned categories may establish nets. Standard IBM sorting 
and indexing processes aid the/traffic analyst, by speeding up and making 
more accurate his routine operations* These sorts are basically legs 
arranged according to various characteristics* Since most T/A operates m 
a reasonably current basis one of the principal problems is to shorten the 
time to get IBM runs made* This lag is both a function of IBM speeds, key- 
punch operator shortage, ttnd the lowness of administrative procedures* 

Machine aids for these listings are needed to permit use of personnel for 
analytic operations rather than clerical* (Some call sign oryptanalytlc 
problems exist which are suitable for solution by computer programs) * 
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G„ Textual Analysis 

1, Plain Text Hess ages 

4 ) • 

Largs volumes of plain text messages are received by 
USA 9 I-Iuch of this is of a comae rcial nature and is of 
interest (depending upon the subject matter, firms, or 
countries involved} as providing valuable collateral in» 
f donation* Sines the volume is so great as to preclude 
detailed examination of all messages, a preliminary scanning 
is performed upon incoming messages to see if they contain 
bey words, addresses, etc 0 This is a human operation in- 
volving scanning overprinted perforator tape, extracting 
messages of interest, and printing on tape operated type- 
writers* When messages are selected for printing they are 
also categorized as to subject content according to the hoy 
words noted* Currently devices are under deveXopsent both 
for automatic format controlled printing and for cate- 
gorization. together xdth format controlled printing 0 
Possibilities for language translation have been considered 
briefly but no work is going on at the present time in IJSA 0 

2 a Commercial Code Messages 

This problem is gery similar to the plain text problem* 
Although little work is being done on such systems} It 
might be desired at same time to place more emphasis on 
them. Equipment similar to that required for plain text 
scanning could be used. The problem is simplified by the 
fact that code groups have a uniform length, and complicated 
by the fact that many codes might be used over one 
communicatiais link. Equipment far printing code group 
meaning currently exists* 



III DIAGNOSTIC OPERATIONS 

A. Search for and Statistical Evaluation of Phenomena 

In many eases traffic appears which is not plain text but has 
been encrypted by some unknown process* lb is necessary, in the absence 
any pertinent information whatsoever, to attempt to make some sort 
diagnosis of the cryptosystem involved in order that an intelligent 
back may be carried out,, This diagnosis may be made upon the tacts 
themselves (Identity) or upon seme derivative text (Latent)* 
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Among the characteristics which may be searched for 
are given monographic * digraphic or other polygraphic fre> 
queacies or roughness* Sets of messages having the same 
characteristics may be grouped together sad differentiated 
from other groups of messages* Statistical phenomena oceuriug 
tilth certain periodicities may be sought for* All of these 
characteristics are searched far and evaluated by means of 
computers, counters, XEtf equipment and in some cases desk 
aids# In addition to these countable phenomena of individual 
messages there are betweerwasssage phenomena such as high 
coincidence rates. Machines of the comparator class are 
used for this problem. Machine aid is usually that of 
pointing out where phenomena exist and of applying some 
statistical test of significance to them. Examination of 
the usefulness of the phenomena requires the ‘work of a 
cryptanalyst* In performing these operations one of the 
largest problems is volume of work. Far example, if 1000 
messages are received per day in a certain system and they 
are to be compared with each other at all possible juxtapositions 
a total of about 500 X 20° coincidence searches must be made. 
This type of operation is being done currently* The problem 
of doing this for a month’s or a year»s traffic is over** 
burdezming at present equipment speeds. 

2 0 Latent 



Other exploitable phenomena may not be observable frcm 
the text of Ihe message itself, but rather from, a derivative 
text such as might be formed by replacing each letter by 
the difference between itself and the proceeding letter, or 
replacing each letter by the distance to the next repetition 
of that letter. When these derivative texts have been 
fanned they may be examined as discussed in the preceding 
paragraph. In general, these latent properties are due to 
partial, but not complete duplication of variables in ihe 
enciphering jsrocess, In seme cases data conversion and 
preparation equipment are able to form the derivative text 
while preparing the data for machine processing. Computers, 
comparators, counter's, ami IBM equipment are also used. 

B. Tests of Specific Hypotheses 



There may be cases in which there is acme reason to suspect that 
a particular encrypting process is used. When this is so more powerful 
tests may be used to detejimine the validity of the hypothesis. 




lo 



Certain machine systems produce noticeable characteristics, 
for example, the Enigma type machine has the characteristic 
that a letter cannot encipher into itself* ' When a frequency 
count is made of the text letters 'which occur frequently in 
plaint ext occur with below average frequency in cipher text* 

A single test of this nature may serve to prove or disprove 
a given hypothesis * Other machine systems have their 
individual characteristics uhich may be used to give more 
powerful tests,, Computers, counters, and IBM equipment 
may be used to perform these diagnoses* 

2 0 Hand Systems 

In some cases it may be believed that a new, unenciphered, ■ 
code is in use* If a variety of traffic is being handled over 
the link in question, messages must be compared against 
themselves fur with itt-me s sage group coincidences* If codes 
became known or partially knot© messages may be compared 
with a recognition, bank of known code groups and scored 
statistic ally 0 In many cases codes will be enciphered with 
what are supposed to be one-time-pads . Re-uses of this key- 
may occur on a different link after an extended period* 

If key has been recovered from one use, other messages may 
be matched with the key, inspecting the results for either 
known or unknown codes* Because of the volumes of texts 
that might be involved all possibilities cannot be tested 
with present equipment* There must be a reasonable hypo- 
thesis that the situation exists before tests can be mads* 
Counters, computers, test and recognition devices, and IBM 
equipment are all used for these problems* 



IV OPERATIONS BASED OH KNOWLEDGE CF THE GENERAL SYSTEM 
A 0 Machine Systems 

lo Depth Search and Reading 

If it has been determined that depths are likely to 
exist in a system, an effort is made to search for them* 
These may be observable from characteristics which appear 
in a leg such as indicators, from high coincidence rates 
between messages or other observable phenomena* When 
depths have been found and if the underlying languages are 
at least partially known, assistance may be given to the 
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£rypt analyst. This may be done by fumldiing a list of 
pairs of words whose simultaneous occurrence Is eompateble 
with the texts involved and which have a good probability 
of occurrence in the language involved* Searching is done 
with ISM equipment, computers, comparators, and test and 
recognition devices while depth reading is usually dense 
with test and recognition devices* 

2* Machine Recovery and Setting 

In most cipher machine systems there are two problems^ 
machine recovery and setting* Machine recovery means 
recovery of the primary variables of the machine system 
while setting recovery normally refers to the recovery of 
the mdssage-id.se variables which are most often positions 
in the cipher machine cycle or cycles,. Some machine re- 
covery processes are largely statistical in nature* These 
stay be performed on computers or IBM equipment. Others may 
require methods of attack combining logical steps with ex- 
haustive trial techniques. 

These require the assumption of a correct portion of 
plain text for a given cipher text together with assumption 
of certain of the periodic variables of the system* Ex- 
haustive trial techniques applied to the remaining variables 
during the operation of an analogue to the cipher machine 
together with logical tests at each trial, serve to identify 
the remaining variables when the correct plain text assumption 
has been made* Setting and partial machine recovery as well 
as computers are used for this* 

An example is that of a wired-rotor system in which the 
periodically changing parameters are identity of rotors, a 
wheal motion, controlling element, and the arrangement of a 
set of manually inserted wires while the message-wise vary- 
ing parameter is initial rotor settings* (The effect of the 
vires is to apply a self-inverse simple substitution to ihe 
plain text before it enters the rotor maze, and to apply 
the same simple substitution to the text emerging from the 
maze to fora the." final cipher text*) 

The wiring of the rotor maze, together with a plain/ 
cipher pair produced with that wiring carries with it a set 6* 
of restrictions on the substitution, of the fora "A is tbs 
substitute of B if and only if C is the substitute of D K « 

Given a sequence of plain/cipher pairs and the wiring mazes 
producing them, the restrictions implied may be suf fteimb 
to determine uniquely the substitution. (For example, the 
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two restrictions* "A is the substitution of B if and only 
if C is the substitution of D” and tt A is the substitution of 
B if and only if C is the substitution of E n together imply 
that A is dot the substitution of B* C is not the substitution 
of either 0 or E* A sufficient number of restrictions may 
yield »A is not the substitution of any letter except F B * 
which is equivalent to W A is the substitute of F",) Moreover* 
if the logical process of determining tho substitution is 
carried out using a sequence of wirings other than that 
actually teed in the encipherment, if may be that no sub- 
stitution will satisfy the implied restrictions - that is* 
the restrictions may be mutually contradictory,, 

Since* with a limited set of rotors* there is a limited 
set of mazes possible* and* in this system, rotor motion is 
strongly limited* It is possible to try for a given matched 
plain and cipher sequence* all possible maze wiring sequences* 
eliminating those which yield contradictions* in the effort 
to determine the substitution wiring# 

In some machine systems* the indicators are such that even 
when all the periodic variables have been determined* the 
message-wise variables cannot be determined by an easy method# 
In the absence of any knowledge of the plain text (other than 
statistical) of a particular message* it may be necessary to 
do the equivsiient of deciphering it for possible values of 
the message-wise variable and examine the results statistically 
to determine which actually is plain. 

If there is a high probability that a certain word* or 
one of a list, of words, occurs in. the plain, it may be more 
economical to determine those values* if any* of the message- 
wise variables* which permit the simultaneous occurrence of 
the cipher text being examined, and one of the words of the 
list. Setting recovery and ooajputeisare used for this, 

3, Decryption 

At times* the crypt analytic process yields complete in- 
formation concerning a cryptographic period. A period is 
an homogeneous set of cipher text which has been encrypted 
with a single cipher machine setup# Any message-wise 
variations in the machine setup are obtainable from the 
cipher texts# ) It is then necessary to perform the de- 
cryption of all available text in accordance with the rules 
of the system and print the resulting plain. Analogs and 
decryption devices often using punched card or tape input 
are used for this. 
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Bo Hand Systems 

la Additive Encipherment 



Successful recovery of additively enciphered messages 
depends on predictability of the key# Key becomes predictable 
when (a) It is generated in a non-random manner or (b) 
when it is reused, Exploitable generated key is either 
produced by a definable process, in which case the problems 
of additive recovery become almost identical to those of 
reading machine encipherments, or produced by a unknown pro- 
cess which results in an exploitable characteristic (an 
aawmple in monographic roughness). Reuse of key permits 
discovery cf the reuse and recovery of the text based on 
the reconstruction of the key, 

Ihere are four facets to the wedges into additive en- 
cipherments: (a) 'System Discrimination, or the minimisation 
of the number of variables that must be considered in reading 
a new system, is almost always performed by hand or on a 
computer because of the variability of the steps required} 

(b) Indicator Recovery, the utilization of the decipherment 
information supplied to the intended recipient by the 
sender, has been carried on almost entirely on IBM pro- 
cesses (particularly sorting) but, to a limited extent* 
has been done on computers and, recognition devices; (c) 

Depth Search, the discovery of messages having the sane 
key, and iaolog aeareh, the discovery of messages having 
the same under-lying plain text and different (but exploitable) 
key, is of such importance that it has been attempted on most 
cf the available equipments (comparators, computers, counters, 
IBM equipment and recognition equipments) as well as by hand; 
finally (d) Exploitation, the actual code or plain-teat 
recovery on. the basis cf the information gained in one or 
more of the preceding steps, is of such a varied nature that 
virtually every analytic equipment; computers, comparators, 
counters, IBM mad recognition equipment as well as decryption 
devices and hand method are in use. 
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These procedures are normally performed by computers 
although IBM equipment with many intervening manual steps 
have been used. 

3 * Additional Complex Procedures 

There are many complicated, procedures, more logical than 
statistical in nature which are used* An example is the 
solution of a simple columnar transposition, with under* 
lying text ordinary language, but unknown subject matter « 
Here one will juxtapose each pair of sequences of test from 
the message which might be successive columns from the 
original form, and for each pair make an estimate <xf the 
relative probability of their arising causally c To the 
better scoring pairs, trial third columns are added, and 
new probability estimates and further eliminations are made r . 
until a scor e is obtained which is unlikely to have been 
obtains d by random in the number of trials attempted, 

A second example is the case in which it is known that 
additive key has been derived by a specific complex manual 
process (with at least one variable of the system unknown) 
but such that the detailed nature of the underlying plain is 
unknown* Here it is necessary to follow the steps of the 
cipher clerk for each possible value of the missing para* 
meter to generate trial additives, to strip each trial 
additive from the cipher text, and examine each resulting 
pseudo plain for language-like properties* Computers are 
best suited to this work* 
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V SUPPORT FUIJCTiaiS 

These functions embrace a number of different activities which 
may employ mechanised aids, These activities are somewhat general to 
all crypt analytic work and are not based on any particular traffic or 
system,, 

A* Linguistic and Statistical Aids 

A number of special dictionaries and statistical studies based 
upon various languages of interest are required as aids to cryptanalysts,, 
The dictionaries and statistics may be based upon particular traffic 
decryptions or upon general samples of the language,, Dictionaries 
arranged in special ordering (such as backwards) may be desired,. Frequent 
revision of dictionaries and statistical studies are required,, Most 
studies of this nature have been made using IBM equipment » Some desired 
studies have net been made because too great a volume of IBEX wade would 
have been required 0 Besides linguistid» studies large mmibers of special 
mathematical and statistical tables have been prepared* These include 
special Poisson* binomial, and multinomial tables and others, This work 
has been done both on IBM equipment and on computers. 

Bo Generation of Cxypto-q^stem data 

It is sometimes desired to provide the analyst with listings of 
data pertaining to a particular cipher machine system. For example, 
tables which enable computation of cycle distance between specific 
machine settings and lists of successive settings of a cipher machine. 

In certain hand systems in which the combining of texts is done in 
several steps, tables showing the end results of the several steps for 
various variables 1 may be desired. These problems are normally done by 
IBM equipment or computers 0 

C„ Desk Aids 



There are a number of small devices Which may be provided for 
the individual cryptanalyst to use directly along with his work. These 
include commercial adding osChines and desk calculators, individual 
cipher machines, analogs of portions of various cyrpto processes, tally- 
ing counters and the like. Such devices may be very useful, providing that . 
they are actually available to the person while working. There is a 
need for more such eqjiipmsnts to aid in moving clerical burdonsfrea 
the analyst. Something whieft is case stage more erudite than a desk calculator b 
would be of use, 

D, Grypt analytic research 

There are times, in the course of current icxyptanalysis, .which, 
during elements appear which are not subject to regular periodic change, 
but are such that a change in them would obviate current methods of 
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attack* Again there are times when information as to new cipher 
machines or systems not inuse, but offered for sale, becomes available 0 
In this sort of situation a substantial effort to prepare to solve a 
problem which may never* exist is justified* 
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~*°ENDIX I 
MACHINE AIDS 



INTRODUCTION 



In the following pages a brief description of computers and more 
special purpose devices 16 made. These descriptions are followed by 
a listing of the principal machine aids currently available for use, 
(or shortly to be in use). A short description of the principal 
functions of each are given. For the listing under computers, an 
attempt has been made to ^define" the categories into which NSA 
computer programs fall. Some explanation Is made as to why certain 
problems should be assigned to computers and others to special pur- 
pose devices in order that the reader may obtain a general notion of 
the areas in which computers and special purpose devices are best 
suited. 

COMPUTERS 



Besides large scale data handling problems, the Agency is faced 
with analytic problems which may be classified under two general 
headings: the "work horse" problems which require almost continuous 

effort to effect almost daily solutions, and problems which require 
machine effort on a much smaller scale and on a more sporadic time 
basis. Under the second type, one would include problems requiring 
only a few machine runs to effect a solution after which no immediate 
need for machine time is required. These problems are definitely 
handled by means of a general purpose computer or IBM equipment. 

Under the "work horse" machine problems we have the following 
fcuo classes: 

Class 1. Problems which Involve many and varied types of 
computational and logical operations and require a reasonable 
amount of machine time. 



Class 2. Problems which Involve a few operations but may 
require considerably more machine time. 



It Is felt that problems in Class 1 are best handled by general 
purpose digital computers, and that problems in Class 2, in most 
cases, are best handled by special purpose devices. 



Problems in Class 1 might be handled quite well by special pur- 
pose devices. However, due to the variety of operations required to 
effect a solution, the equipment would W£ll approach the design of a 
general purpose computer. For this reason It is deemed advisable to 
develop general purpose equipment with the idea that the added cost, 
if not excessive, is Justified In having a device which has general 
utility even after the problem or problems which motivated the device 
no longer exists. lOP bhCRET CO 1 ROL NUMBER 
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- Problems In Class 2 are usually given every consideration as 
computer problems and are handled as such unless by virtue of size, 
importance, time consumption and monetary savings, it is decided that 
they warrant special purpose equipment. 

O OfiPWTOR S 

In searches for causal characteristics (such as reuse of key, 
•nelpherment with most variables identical, etc.) it is often desired 
to make comparisons between texts in ah effort to find if and where 
snese circumstances exist, imong the "symptoms" being sought may be 
fsucb items as high coincidence rates, similar repetition patterns, 
and characteristic frequency distributions. 

Tasks of this nature are often performed on comparator equip- 
ments. These equipments have in general the ability to examine texts 
at many Juxtapositions, to generate certain periodic texts, to make 
various combinations and comparisons using logical circuitry, and to 
count and compare results against a criterion in order to test for 
significant results. General purpose comparators, with great flexi- 
bility In problem capability, and limited purpose comparators are In 
use . 

4 

SETTING RECOVERERS 

In a number of machine cipher systems all periodic variables are 
often recoverable leaving only a particular message variable, that 
of the position in the machine cycle, to be recovered. It is desired, 
therefore, to provide a means for recovering the position or setting 
of the machine at the start of the encipherment. 

Setting recoverers are In general of two varieties: crib place- 

ment and statistical placement. In crib placement procedure, a 
probable plain text word (or crib) is assumed to underlie some posi- 
tion of the message and possible machine settings are tried on an 
'■exhaustive trial basis or by a series of logical tests to see If the 
assumption can be verified or proven false. In statistical placement 
procedure, a message is decrypted at all possible settings and the 
■•esultant possible plain text Is examined for statistical plain text 
characteristics. Since certain languages have a very strong odd 
letter-even letter unbalance some procedures consider cipher, key 
and plain text streams solely on a modulo 2 basis for statistical 
placement . 

SETTING 4ND P4RTHL MACHINE RECOVERERS 

In some machine cipher systems not only the message setting but 
also some of the periodic machine variables are unknown. Procedures 
have been developed to solve both unknowns. simultaneously. These 
ot^ocedures generally Involve exhaustive trial setting runs while 
applying logical procedures to test assumptions of the other variables. 
<~or these tests long cribs may be required, or very long cipher texts 
and statistical plain text characteristics may be used. 
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TEST AND RECOGNITION OR CRITERION DEVICES 



In situations where key can be predicted or Is used more than 
once. It is desirable to make tests for its occurrence in a particular 
position and recognize according to plain text (or plain code) char- 
acteristics. In the case of codes these may be known or unknown.- When 
the code Is unknown or cannot be predicted, recognition of plain code 
'.'S opposed to random text must be performed by observing group repeats, 
otherwise recognition of known code groups, known plain text groups or 
single letters, and plain text roughness are variously used. Provision 
must be made for the combining of streams of textual material according 
to the method of the crypto system Involved and selecting the streams 
.In the desired order. 

ANALOGS. TEST MID DECRYPTION D EVICES 

In the simulation of various cryptosystems a variety of devices 
found useful to replace hand operations. A device may simulate all 
or part of the actions of either a machine system or a hind enciphered 
system and may have a manual, tape, or card input together with a tape, 
c*Hrd, or printed output. Their principal utility is as a labor saving 
-il cl. They are aften used in the vicinity of the operating analytic 
section. 

DATA CONVERSION , PREPARATION AND RECORDING 

Since data may arrive at the Agency in a variety of forms Includ- 
ing hard copy, perforated paper tape, punched cards, and magnetic tape 
und as It Is utilized by both analytic machines and personnel in 
Furious of these forms devices are necessary to permit the conversion 
of" data from one such form to another. At this time minor changes 
may be made in the data such as recoding in a different baud format, 
deletion of certain characters. Insertion of Indicative information 
iud spaces, etc. Auxiliary Input and output to analytic equipments 
'ire required. The variety of such equipments In use is very great. 



COUNTERS 



In the course of exploratory and cryptanalytic operations a large 
amount of information is often obtained from making counts of various 
textual characteristics. A number of specialized counting devices 
exist for the purpose of making these counts. The devices are often 
located in the vicinity of the using section. 

SELECTION DEVICES 



Large quantities of plain text material are received In perfor- 
ated tape form. These messages require printing in an acceptable 
Message format, and because of the volume Involved, deletion of messages 
of little interest will be needed. By use of a list of key words 
pertaining to subjects of Interest, this deletion function can be per- 
y’oraed in a step prior to printing. Format is controlled by identi- 
fication of heading indications, etc. Similar devices could handle 
commercial code material but are not currently being planned. 
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EDITING DEVICES 

The possibilities of mechanised editing are currently beginning 
to be explored. The problems involve reordering of message inform- 
ation, deletion of superfluous material, adding auxiliary Indicative 
information, collation of several versions of a message to produce a 
best copy, provision of output for logging, regrouping of Information 
and many others. \ first editing device, a limited purpose, char- 
acter handling computer, is under construction. 

IBM EQUIPMENT 

This category includes standard IBM equipment plus modifications 
made to these equipments which enable problems peculiar to the Agency 
effort to be solved with more facility. The aggregate of ordinary 
and special IBM equipment; is capable of performing tasks of any des- 
cription (just as is a digital computer) but with certain drawbacks 
for very large operations including the requirement for manual handling 
of cards between steps of various operations, and the limitations on 
speed Imposed by mechanical card handling. 

DESK IIDS 

In addition to all the machine aids previously listed, there is 
a final category of equipments which are used by the individual crypt- 
analysts at or on the desk. These Include desk calculators, actual 
cipher machines, and special purpose devices used to simulate portions 
of a cryptosystem process. These devices are required in general to 
be small, simply operated and quiet. 
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1. COMPUTER PROGRAMS 



ft. Cipher Machine Analog and Simulation: 

ft program which simulates the operation of a cipher machine 
in order to study its cryptographic characteristics. 

B. Machine Setting: 

ft program wherein partial knowledge of the machine is known 
and some subsidiary information (cribs, etc.) is employed to 
recover the initial setting of the machine. 

C. Decrypting: 

ft program wherein the usually non-machine system is assumed 
and messages decrypted by means of system analog. 

D. Key Study: 

ft program wherein key is analyzed with view to determine 
Its characteristics and method of generation. 

S . Computational : 

1 program wherein special counts and tables, etc. are made 
on sets of data. 

P. Rough Key Exploitation: 

ft program wherein key characteristics rather than actual 
key values are exploited to obtain underlying "plain text". 

G. Logical: 

* 

ft program wherein the basic operation is one of comparing 
and ordering . 

H. Statistical Research: 



ft program wherein the machine obtains information concerning 
a population by random sampling. 
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I. Mathematics Research: 

* 

K program therein mathematical and statistical theory is 
tested for computational, statistical and cryptanalytie feasi- 
bility. 

J. Engineering Research: 

\ program wherein designs or projected designs are analyzed 
for feasibility and optimal properties. 

K. Intercept Studies: 

These are programs involving intercept control and direc- 
tion finding. 
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2 . COMPARATORS 



A. 


AFSAF D1A 


General Purpose High Speed Comparator 
(Perforated Paper Tape) 


B. 


Copperhead 


Group Repeat Search between messages 
(Polystyrene tape) 

• 


C. 


TO MM 


Counts 1, 2 , 3 and 4 character repeats 
(70 mm paper tape) 


D 


PELLA 


Limited Purpose High Speed Comparator 
(1-64 character repeats) (Magnetic Tape) 


E. 


ROBIN - 


Coincidence Counter with Threshold 
(Perforated Paper Tape) 


F. 


IDA 


Coincidence Counter between bands 
(Perforated Paper Tape) 


Q. 


HYPO (See 3*0 


Coincidence Counter with Threshold 
(35 mm film) 
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3 . SETTING RECOVERY 



A. 


HECATE 


Hagelin Message Setter* (Crib) 


B. 


WARLOCK I 


Hagelin Message Setter (Statistical) 


C. 


WARLOCK II 


Wired Wheel Hagelin Message Setter 
(Statistical) 


D. 


VIVIAN 


Hagelin Message Setter (5 Wheel Parity) 


E. 


HAGELIN MESSAGE 
SETTER 


Hagelin Message Setter (3 Wheel Parity) 


P. 


HYPO (See 2G) 


Enigma Hagelin Message Setter (3 wheel 
Hagelin max.) 


G. 


FIRECRACKER 


Purple Machine Message Setter (Crib) 


H. 


GRENADE 


Enigma Setting 



TOP SECRET FKOtH 



A. BOMBS 

B. PROG 

C. BRIBE 
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4* SETTING AND PARTIAL MACHINE RECOVERY 



Enigma Wheel Order and Steeker Recovery 

I I Steeker and Setting 

Recovery 

General Wired Wheel Stacker, Order, 
Setting Recovery 
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5. TEST AND RECOGNITION OR CRITERION 



A. 


DEMON II 






B. 


SKATE II 


Key Finder/Slide Run 


C. 


DEMON III 


Depth of 2 reading/Key Stripping (Base 
32: 5 characters; Base 10: up to 15 
characters) 


D. 


SLED I 


Wired wheel decipherment/Depth search/ 
Key flnder/Colncidenee counts/group 
I.C. counts/chaining 


E. 


DUCHESS 


Group I.C. cotints of differences ^ f (f-l) j 


F. 


MISTRESS 


Placode finding (repeat search) 


G. 


GEEWHIZZER 


Digraph weighting of cipher text/Fourier 
weighting of cipher digraphs 
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A. 

B. 

C. 

D. 

E. 

F. 

g. 

H. 

i. 

j. 

K. 

L. 



M. 



N. 

O . 

P. 

Q. 




r, rg* 

;8jj 



froth 



DRAFT 
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6 . ANALOGS, TEST AND DECRYPTION DEVICES 



B-211 
C-38 (NAG) 

SATYR 

STURGEON Analog 
EMBRYO OPHIS 
BABY OPHIS 
ROE 

HELLCAT 
AFSAF D60 
MAISIE 
PEELER 
MATTHEW 



B-211 Analog 



Hagelin C -38 Analog 

Hagelin C -38 Analog 

Model C, D and E in one package 

G.P. wired wheel 

G.P. wired wheel 

Deciphers Sturgeon traffic using 
externally prepared key tapes 



Polyalphabetle ( 26 ) decipherer 
^N” square decipherer 
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Code lookup and printer 
Additive Stripper and Tester 



Strips key from cipher using 
externally prepared key tapes 



Chinese 

Typewriter 

CALL 35 
HOYLE 
M-8 
PADDLE 



Draws a stylized (straight line) 
characters from special coding in 
that card 

Call sign decipherment 

Playfair decipherment 

Enigma Analog and/or ’’Key" generation 

Decipherment of two letter enciphered 
code 
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7- MTft CONVERSION, PREPARATION AND RECORDING 



A. 


MILLIE . 


Perforated Paper Tape to magnetic tape 
( "regen " or pafcternized) 


B. 


MATTHEW 


2-to-l conversion of perforated paper tape 


C. 


JOHN 


Mononome Dlnorae Decipherment 


D. 


ASAP 25 


High speed perforated paper tape reader 
(Potter) used in tape checking 


E. 


BONNY 


High speed perforated paper tape pluggable 
regen and pattemizer 

1 


P. 


CENSOR 


Checker for coded paper tapes (Atlas, 
Demon) 


6 • 


AYE AYE 


Perforated paper tape patternizer 


H. 


PRIMATE 


Computer Program Tape Flinch 


I. 


MAYBE 


Computer Magnetic Tape Preparation Device 


J. 


CXCO 


Perforated Tape Readers, Typewriters and 
Punches 


K. 


CAPPY 


Card to Tape Converter 


L, 


TIZZY 


Tape to Card Converter 


M. 


APSAP 44 


High speed digital and/or literal recorder 


N. 


HI Speed 






TT Reader 


High speed mechanical perforated tape 
reader 


0. 


Hi Speed 






TT Punch 


High speed perforated tape punch 


P. 


Ferranti Reader 


High speed photoelectric perforated tape 



reader 
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9* COUNTERS 



4. C4DILL4C 



Monographic Counter/I. C. computation/ 
baud level totals 



B. 

c. 

D. 



B4BY 4LC4TR4Z 36 category monographic frequency counter 

(differencing optional) 



DELT4 COUNTER Counts baud -no baud changes in 5 levels 

plus character totals 

DELT 4-DOT COUNTER Counts runs of bauds and no bauds in 5 

levels of tape 



E. DIFFERENCE COUNTER Counts differences between two tapes 

(digital) 

F. DINOME COUNTER Counts dinomes supplied as one digit from 

each of two tapes 



/ 
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10. SELECTION DEVICES 



A. 


PATRICIA 


Message Categorization Unit 


B. 


BUDDY 


Message ending recognition - Format 
Controlled Printing 


C. 


PADDY 


Message Categorization - ending Reeog 
nitlon - Format Control Printing 



^r\OTH 
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A . BOGART 



11. EDITING DEVICES 

Limited purpose character handling 
computer 
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12. IBM EQUIPMENT 



Standard IBM Punches, Verifiers, Sorters, Collators, 

Reproducers, Tabulators 

Special IBM Coordinating Reproducer, Brute Force 

Device, Card-to-Tape, Tape-to-Card 

Auxiliary Devices Relay Cates 

6o4 Small General Purpose Calculator 
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A* 



B. 



C. 



D. 

E. 
P. 
G. 




Calculators 

NCR 

B-211 Handt aster 
Electric Kagelln 
WW Handt ester 
PICCOLO 
ROSE 
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13. DESK AIDS 

Computational Work 
Additive testing 
B-211 testing 
Keyboard C-38 

General Wired Wheel testing 

Crib Tester and Decipherer 
Sturgeon Crib Tester and Decipherer 



/ 
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